{"id":4265,"date":"2018-02-26T20:44:53","date_gmt":"2018-02-26T20:44:53","guid":{"rendered":"https:\/\/hyperlink-technology.com\/nesma\/?p=4265"},"modified":"2018-02-26T20:44:53","modified_gmt":"2018-02-26T20:44:53","slug":"gdpr-affects-most-businesses-are-you-ready","status":"publish","type":"post","link":"https:\/\/hyperlink-technology.com\/nesma\/gdpr-affects-most-businesses-are-you-ready\/","title":{"rendered":"Do you know the difference between DPA & GDPR?"},"content":{"rendered":"
\n
\n
\n
\n
\n

GDPR differs to DPA with increased mandatory regulations and more accountability. <\/span><\/h3>\n

Every business needs to consider how the GDPR will affect them and to start planning for it now, as this is not a process that can be achieved overnight.<\/p>\n

GDPR legislates as to how businesses gather, use and retain personal data about individuals who are based in Europe. Businesses must comply with these regulations or face hefty fines or even a prison sentence. There is also a great risk of reputational damage to businesses for breaches of this regulation.<\/p><\/blockquote>\n

When the General Data Protection Regulation (GDPR) comes into effect on 25 May 2018 it will replace the current Data Protection Act 1988 (DPA). If your business is compliant with the DPA, you probably already fulfil many of the requirements of the General Data Protection Regulation (GDPR).<\/p>\n

Below is a summary of the key differences to help you consider what action you may need to take to update your existing information systems.<\/strong><\/p>\n

1 Location<\/strong><\/span><\/p>\n

Current:<\/strong> DPA applies only to organisations the UK.<\/p>\n

New:<\/strong><\/span> GDPR regulation extends its reach to encompass all European States. It will apply even though Britain is leaving the European Union. It also applies any global company holding data on EU citizens.<\/p>\n

2 Definition of Personal Data<\/strong><\/span><\/p>\n

Current:<\/strong><\/span> Personal data and sensitive personal data which could identify someone directly or indirectly.<\/p>\n

New:<\/strong><\/span> Definition is extended to include online information which could identify a person, for example, IP addresses, mobile device IDs and encrypted data. There are also new responsibilities to protect children\u2019s personal data.<\/p>\n

3 Responsibility
\n<\/span><\/strong>
\nCurrent:<\/strong> <\/span>Only the data controller has responsibility for security of information<\/p>\n

New:<\/strong><\/span> GDPR also makes the data processor responsible. Companies with more than 250 employees must employ a Data Protection Officer. Consumers could hold both the data processor and the data controller responsible for data breaches.<\/p>\n

4 Accountability<\/strong><\/span><\/p>\n

Current:<\/span><\/strong> Under the DPA businesses had to indicate intent and willingness to comply<\/p>\n

New:<\/strong><\/span> GDPR means businesses and organisations have mandatory responsibility to demonstrate compliance. Ways in which this can be shown include:<\/p>\n